Reject non-speak2type shortcut requests in provider shim
This handler approves every BindShortcuts entry it receives and does not validate which app requested it, so when this process owns org.gnome.Settings.GlobalShortcutsProvider (see _start_provider_shim()), other apps’ portal requests can be silently approved without their normal confirmation flow. Restricting approvals to speak2type’s app id (and rejecting others) avoids cross-application shortcut permission bypass while the engine is running.
Useful? React with 👍 / 👎.
Originally posted by @chatgpt-codex-connector[bot] in #2 (comment)
This handler approves every
BindShortcutsentry it receives and does not validate which app requested it, so when this process ownsorg.gnome.Settings.GlobalShortcutsProvider(see_start_provider_shim()), other apps’ portal requests can be silently approved without their normal confirmation flow. Restricting approvals to speak2type’s app id (and rejecting others) avoids cross-application shortcut permission bypass while the engine is running.Useful? React with 👍 / 👎.
Originally posted by @chatgpt-codex-connector[bot] in #2 (comment)